Dancer2::Plugin::Auth::OAuth vulnerabilities

1 known vulnerability in Dancer2::Plugin::Auth::OAuth from BIAFRA. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Dancer2::Plugin::Auth::OAuth: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2026-11832Jun 15, 2026BIAFRA

  Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The default nonce was generated using an MD5 hash of the epoch time, which is predictable.